Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37332e3232342e302f31392d3234203d3e203232303437.roa
File: 3230302e37332e3232342e302f31392d3234203d3e203232303437.roa (raw, json)
Hash identifier: +vIwAUXqTXyaEUUtdMvgVNJuMwklB7iVlwVwfVnUFIQ=
Subject key identifier: 01:52:F2:3D:59:94:8E:11:6A:D5:E3:2D:F3:0A:68:C3:6D:58:D8:59
Certificate issuer: /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial: 318CBBC037DF81A11E837C9AE28D6D13973F21E1
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37332e3232342e302f31392d3234203d3e203232303437.roa
Signing time: Tue 04 Feb 2025 18:19:17 +0000
ROA not before: Tue 04 Feb 2025 18:14:17 +0000
ROA not after: Tue 03 Feb 2026 18:19:17 +0000
asID: 22047
IP address blocks: 200.73.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8c:bb:c0:37:df:81:a1:1e:83:7c:9a:e2:8d:6d:13:97:3f:21:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Validity
Not Before: Feb 4 18:14:17 2025 GMT
Not After : Feb 3 18:19:17 2026 GMT
Subject: CN=0152F23D59948E116AD5E32DF30A68C36D58D859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:b6:60:d2:38:3b:00:c4:86:f3:47:50:9c:
bf:25:00:a7:11:8a:2f:17:f0:4d:d2:02:63:91:4c:
a3:63:69:52:6c:52:02:69:69:37:3e:6e:b6:c9:d8:
30:f2:60:36:4a:2c:05:27:5b:f6:3d:5e:62:72:06:
66:bc:b7:c9:4a:12:c2:10:bb:5d:28:16:56:e9:c8:
f9:54:df:0d:ee:63:a0:35:a3:cc:26:b9:39:e7:11:
a3:00:a4:12:52:9c:07:b7:5e:c6:fb:19:5a:18:66:
18:9e:3c:9f:b6:af:f0:bb:e6:47:00:7a:bf:b1:d8:
9e:64:9e:25:35:f1:2f:1e:bf:b5:5f:e1:19:77:21:
46:8f:a7:78:76:1a:68:da:2d:c8:0e:f1:85:8b:79:
cb:29:e6:4a:50:25:65:ed:d2:5b:80:09:3c:f0:7c:
92:aa:1a:b5:09:e9:87:1f:99:62:27:5a:de:12:e4:
a5:63:b6:fa:02:a3:52:52:a9:d5:9a:12:f1:a1:ae:
c6:14:2c:ae:bd:32:e6:4a:21:db:49:67:bc:71:62:
33:f7:eb:20:21:32:55:c6:1c:76:cd:c1:95:b5:69:
d2:e7:b3:95:60:9c:df:fb:20:9d:ba:28:8a:3e:2c:
00:9a:54:13:95:b0:13:e7:4b:d2:eb:74:b6:85:b8:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:52:F2:3D:59:94:8E:11:6A:D5:E3:2D:F3:0A:68:C3:6D:58:D8:59
X509v3 Authority Key Identifier:
keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e37332e3232342e302f31392d3234203d3e203232303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.73.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:0d:a7:05:76:ea:b5:94:16:cb:8b:88:02:d1:20:c7:e6:52:
b2:cd:ed:ff:bb:62:22:3c:29:1c:32:06:3b:d2:cf:0d:69:29:
5a:76:12:8a:97:29:b6:a9:0a:69:4f:d2:14:df:ec:64:88:b4:
76:7b:6b:2f:a4:75:a1:3f:25:56:91:33:21:81:6c:4f:71:c5:
7a:c7:f2:a6:2a:85:6a:b2:42:11:1f:e5:d9:00:69:8f:32:83:
76:72:86:62:2b:53:c5:e0:03:6a:18:bd:9f:af:1c:46:23:3b:
97:35:54:28:bf:4d:2f:ff:b6:18:e2:66:67:91:c9:d0:99:db:
2b:f9:77:5b:2a:3d:4a:a7:c3:af:f7:fb:4a:95:62:ac:33:70:
0f:6b:6c:67:46:4b:b3:fb:64:76:3e:9a:e3:b1:a2:b8:5e:15:
48:bb:37:bd:bf:0f:3a:bb:d1:c0:45:b4:f7:f6:3f:b1:bd:8c:
1a:f9:ea:f1:a1:c8:0c:e4:11:19:10:4a:de:d8:52:e3:3f:88:
4c:97:e7:04:d6:ee:43:b8:32:24:da:77:96:a2:ca:bf:27:aa:
a6:b6:23:3d:88:32:75:92:f2:4b:8e:57:94:bf:cb:7c:61:00:
92:07:f5:0c:e5:68:55:ca:c9:f1:56:6b:40:9a:28:d1:91:3e:
d4:89:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:43 2025 by rpki-client